@wix/himalaya-cli 0.1457.0 → 0.1459.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/serve-runtime/src/wix-bridge.d.ts

@@ -1,3 +1,4 @@
+export declare const WIX_API = "https://www.wixapis.com";
 /** The narrow Wix consumer endpoints allowed to receive credentials for SSE. */
 export declare function isAllowedConsumerStreamTarget(raw: string): boolean;
 /** Classify an absolute-URL rejection: an off-gateway Wix account host is a

package/dist/cli.mjs

@@ -1059,8 +1059,8 @@ function toBase64(bytes2) {
 function utf8Decode(bytes2) {
   return new TextDecoder("utf-8").decode(bytes2);
 }
-function fromBase64Url(b64url3) {
-  const std = b64url3.replace(/-/g, "+").replace(/_/g, "/");
+function fromBase64Url(b64url4) {
+  const std = b64url4.replace(/-/g, "+").replace(/_/g, "/");
   return fromBase64(std + "=".repeat((4 - std.length % 4) % 4));
 }
 function toBase64Url(bytes2) {
@@ -8115,6 +8115,7 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
+    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -160095,6 +160096,122 @@ var init_pinned_read = __esm({
   }
 });
 
+// ../../core/serve-runtime/src/member-exchange.ts
+function hopAllowed(url, firstHost) {
+  if (url.protocol !== "https:" || url.port !== "" && url.port !== "443" || url.username || url.password) return false;
+  const host = url.hostname.toLowerCase();
+  return host === firstHost || host === "wix.com" || host.endsWith(".wix.com") || host.endsWith(".wixsite.com") || host === "wixapis.com" || host.endsWith(".wixapis.com");
+}
+async function exchangeMemberSession(input, fetchImpl = fetch, random = randomBytes6, now = Date.now, redirectUri = REGISTERED_REDIRECT_URI) {
+  const { clientId, sessionToken } = input;
+  if (typeof sessionToken !== "string" || !sessionToken || sessionToken.length > MAX_SESSION_TOKEN_LENGTH) {
+    return { ok: false, code: "bad_request" };
+  }
+  const call = async (url2, init) => {
+    try {
+      return await fetchImpl(url2, { ...init, signal: AbortSignal.timeout(STEP_TIMEOUT_MS) });
+    } catch {
+      return null;
+    }
+  };
+  const json8 = async (res) => {
+    try {
+      const v2 = await res.json();
+      return v2 && typeof v2 === "object" ? v2 : {};
+    } catch {
+      return {};
+    }
+  };
+  let visitor;
+  try {
+    visitor = await mintAnonymousVisitor(clientId, (u2, i2) => call(String(u2), i2 ?? {}).then((r2) => {
+      if (!r2) throw new Error("unreachable");
+      return r2;
+    }));
+  } catch (e2) {
+    return { ok: false, code: e2?.message === "unreachable" ? "unreachable" : "visitor_token_failed" };
+  }
+  const verifier = b64url2(random(32));
+  const challenge = b64url2(sha256(verifier));
+  const state = b64url2(random(8));
+  const rsRes = await call(`${WIX_API}/_api/redirects-api/v1/redirect-session`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${visitor}` },
+    body: JSON.stringify({ auth: { authRequest: {
+      clientId,
+      responseType: "code",
+      responseMode: "fragment",
+      redirectUri,
+      scope: "offline_access",
+      state,
+      nonce: state,
+      codeChallenge: challenge,
+      codeChallengeMethod: "S256",
+      sessionToken
+    }, prompt: "none" } })
+  });
+  if (!rsRes) return { ok: false, code: "unreachable" };
+  const rs2 = await json8(rsRes);
+  const fullUrl = rs2.redirectSession?.fullUrl;
+  if (!rsRes.ok || typeof fullUrl !== "string") return { ok: false, code: "redirect_session_failed", status: rsRes.status };
+  let url;
+  try {
+    url = new URL(fullUrl);
+  } catch {
+    return { ok: false, code: "redirect_session_failed", status: rsRes.status };
+  }
+  const firstHost = url.hostname.toLowerCase();
+  let code;
+  let lastStatus;
+  for (let hop = 0; hop < MAX_HOPS; hop++) {
+    if (!hopAllowed(url, firstHost)) return { ok: false, code: "authorize_host_refused" };
+    const res = await call(url.toString(), { method: "GET", redirect: "manual", headers: { "User-Agent": "Mozilla/5.0" } });
+    if (!res) return { ok: false, code: "unreachable" };
+    lastStatus = res.status;
+    const location = res.headers.get("location");
+    if (!location) return { ok: false, code: res.status >= 400 ? "authorize_refused" : "authorize_no_code", status: res.status };
+    if (location.startsWith(redirectUri)) {
+      const params = new URLSearchParams(location.slice(redirectUri.length).replace(/^[?#]/, ""));
+      if (params.get("state") !== state) return { ok: false, code: "authorize_state_mismatch" };
+      code = params.get("code") ?? void 0;
+      break;
+    }
+    try {
+      url = new URL(location, url);
+    } catch {
+      return { ok: false, code: "authorize_no_code", status: res.status };
+    }
+  }
+  if (!code) return { ok: false, code: "authorize_no_code", ...lastStatus !== void 0 ? { status: lastStatus } : {} };
+  const tokRes = await call(`${WIX_API}/oauth2/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ clientId, grantType: "authorization_code", code, codeVerifier: verifier, redirectUri })
+  });
+  if (!tokRes) return { ok: false, code: "unreachable" };
+  const tok = await json8(tokRes);
+  if (!tokRes.ok || typeof tok.access_token !== "string" || !tok.access_token) return { ok: false, code: "token_exchange_failed", status: tokRes.status };
+  const expiresIn = typeof tok.expires_in === "number" ? tok.expires_in : Number(tok.expires_in);
+  return { ok: true, accessToken: tok.access_token, expiresAt: now() + (Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 3600) * 1e3 };
+}
+var REGISTERED_REDIRECT_URI, MAX_HOPS, STEP_TIMEOUT_MS, MAX_SESSION_TOKEN_LENGTH, b64url2, randomBytes6;
+var init_member_exchange = __esm({
+  "../../core/serve-runtime/src/member-exchange.ts"() {
+    init_sha256();
+    init_wix_bridge();
+    REGISTERED_REDIRECT_URI = "himalaya-appsmith://oauth/callback";
+    MAX_HOPS = 8;
+    STEP_TIMEOUT_MS = 8e3;
+    MAX_SESSION_TOKEN_LENGTH = 4096;
+    b64url2 = (bytes2) => {
+      let s2 = "";
+      for (const b2 of bytes2) s2 += String.fromCharCode(b2);
+      return btoa(s2).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+    };
+    randomBytes6 = (n2) => globalThis.crypto.getRandomValues(new Uint8Array(n2));
+  }
+});
+
 // ../../core/serve-runtime/package-share.ts
 function parseStored(bytes2, id) {
   if (!bytes2) return null;
@@ -160929,6 +161046,32 @@ ${releaseId}`;
         }
         return new Response(upstream.body, { status: upstream.status, headers: responseHeaders });
       }
+      if (request.method === "POST" && path2 === "/v1/__webwix/member-exchange") {
+        const noStore = { "cache-control": "no-store" };
+        if (opts.webwixBridge === false) return json5(503, { error: "webwix_bridge_disabled" }, noStore);
+        if (!opts.previewTokenSecret) return json5(503, { error: "preview_token_unavailable" }, noStore);
+        const exchangeApp = resolveApp(request, url);
+        if (!exchangeApp) return json5(400, { error: "app_required" }, noStore);
+        const exchangePin = resolvePin(request, url);
+        if (!exchangePin || !resolvePreviewToken(request, url)) return json5(403, { error: "draft_preview_required" }, noStore);
+        const exchangeCfg = await appConfigFor(request, url, exchangeApp);
+        if (!exchangeCfg.ok) return exchangeCfg.response;
+        if ((await manifest(exchangeApp))?.releaseId === exchangePin || await isRingRelease(exchangeApp, exchangePin)) {
+          return json5(403, { error: "draft_preview_required" }, noStore);
+        }
+        const exchangeClient = wixClientIdOf(utf8Decode(exchangeCfg.bytes));
+        if ("error" in exchangeClient) return json5(501, { error: `member_exchange_${exchangeClient.error}` }, noStore);
+        let exchangeBody;
+        try {
+          exchangeBody = await request.json();
+        } catch {
+          return json5(400, { error: "bad_request" }, noStore);
+        }
+        if (!exchangeBody || typeof exchangeBody !== "object") return json5(400, { error: "bad_request" }, noStore);
+        const exchanged = await exchangeMemberSession({ clientId: exchangeClient.clientId, sessionToken: exchangeBody.sessionToken }, webwixFetch);
+        if (exchanged.ok) return json5(200, { accessToken: exchanged.accessToken, expiresAt: exchanged.expiresAt }, noStore);
+        return json5(exchanged.code === "bad_request" ? 400 : 502, { error: exchanged.code, ...exchanged.status !== void 0 ? { status: exchanged.status } : {} }, noStore);
+      }
       if (request.method === "POST" && path2 === "/v1/__webwix/call") {
         const served = { rung: "none" };
         let status = 500;
@@ -161545,6 +161688,7 @@ var init_server2 = __esm({
     init_base64();
     init_contract();
     init_pinned_read();
+    init_member_exchange();
     init_package_share();
     init_wix_bridge();
     init_account_rung();
@@ -162004,32 +162148,32 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/DashboardHost-D0B8dEBh.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "e26fb4b874b85bc357947414d2fa6e74884693e9d5b745d5013cef7888c96c29" },
-      { key: "assets/DevDrawer-C6gwNvao.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "e8516d92ca236c29376f0c40efd4ee3604cb7db108645d673b9435f56da9cdf9" },
-      { key: "assets/IdiomCompare-DnSL-GJC.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "5f58eaefd5bf5a632e1f366da2ed53ad85222c34293c74f74aa9f2f6a793d281" },
-      { key: "assets/LightboxViewer-BqzxBzhn.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "c6c763d66eb1142a956f56cd7e4ee0f3b3e190318b3386196192d2abb1f95cf9" },
-      { key: "assets/PhonePreviewControl-BHnDXWCB.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "892ca6b06aaa7c05f1f445d403825d5639901f398586dc37817b0a29e804ffd2" },
-      { key: "assets/SchemeCompare-ClVT_YAb.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "ace9f54f4b95510011aab340a0b1022af6633a798b716a53dc944c86d19c6c2a" },
-      { key: "assets/index-Bq3ysO9c.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 1269194, sha256: "e12b748b66f3d5ff6db24a06d4222454c16658944a1631aa88a39d1b069b78da" },
-      { key: "assets/pdf-W69ludLy.js", contentType: "application/javascript; charset=utf-8", offset: 1338439, length: 488199, sha256: "6009689a46a2b8b34cc4f9b88ab0f2c424e2db7d2f4220a911a11846b97ae453" },
-      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1826638, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1826711, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-Cf25iG0t.js", contentType: "application/javascript; charset=utf-8", offset: 3143745, length: 2868, sha256: "c3422777426b2518dcd8ccbbe2947afaf8c2e5bc8ef19aced71789980a85d5d0" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3146613, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3151223, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3639807, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3730731, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3821715, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3912695, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4003567, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4094547, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4203183, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4312267, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4421315, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4529015, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4617123, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4623871, length: 4947, sha256: "77f8363b6e18f52fb530e87c71f81f02dab7879d23523ea65869dab642684fb9" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4628818, length: 17786, sha256: "084107ca997628c248f1b0ba3a7494744850df39fad813546ab8bdb82a6058da" }
+      { key: "assets/DashboardHost-C43Yf5i0.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "ed853f04eb950f074bb4b910d5b54777a593265eb3e9b6b69865a534afb4e367" },
+      { key: "assets/DevDrawer-Dtpdyj6s.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "bd3f6e0dc4d77df24edc6945bc3a9d8271db4bb87b6d5504dbeac0c979fe97cc" },
+      { key: "assets/IdiomCompare-Q0N9nyRz.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "f8c8dd05dd97b368107937763ce0713a6fd2a1dd8fbb443184e05fa8177b678c" },
+      { key: "assets/LightboxViewer-DXQZfuRl.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "3b864e63b7d1edb62ae343113b949596a7db90cb85a598a778ee0e29a7bede10" },
+      { key: "assets/PhonePreviewControl-DNUNrsXI.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "de870adf633b1f1075bb27f0cb75b3526b6409fc246d8ed8166e02c466004034" },
+      { key: "assets/SchemeCompare-nZarcCIk.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "5f668d6a07cc16c4ba72d5867cb73f947f82a88abcb74aaefb2096ded87ffe88" },
+      { key: "assets/index-CkZmNXjh.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 1274560, sha256: "12bd2fba7aa7c1bb8b01ca5a2fe87ebf6a1f33651e5e86b031f9205677408aad" },
+      { key: "assets/pdf-CGOkyAKC.js", contentType: "application/javascript; charset=utf-8", offset: 1343805, length: 488199, sha256: "25e2f49761cb2b6ffc967924e0aeea1225f60db8c80404928a4f6c20061aa6a8" },
+      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1832004, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1832077, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-lG038l52.js", contentType: "application/javascript; charset=utf-8", offset: 3149111, length: 2868, sha256: "2e062ad5b358932919bccd5594ece75c4e98f1a634811123cf334d791884663a" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3151979, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3156589, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3645173, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3736097, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3827081, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3918061, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4008933, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4099913, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4208549, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4317633, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4426681, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4534381, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4622489, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4629237, length: 4947, sha256: "8f83cd54a8228dc903c5530de84080a2aff80f9ad4b7223985eb9da54f3a5c71" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4634184, length: 17786, sha256: "084107ca997628c248f1b0ba3a7494744850df39fad813546ab8bdb82a6058da" }
     ];
   }
 });
@@ -162597,14 +162741,14 @@ var init_embedded_bundles = __esm({
 // ../store-release/register-bundle.ts
 import { readFileSync as readFileSync88 } from "node:fs";
 import { createPrivateKey as createPrivateKey4, sign as sign2 } from "node:crypto";
-function b64url2(b2) {
+function b64url3(b2) {
   return Buffer.from(b2).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 function ascJwt(keyId, issuerId, p8, now) {
-  const header = b64url2(JSON.stringify({ alg: "ES256", kid: keyId, typ: "JWT" }));
-  const payload = b64url2(JSON.stringify({ iss: issuerId, iat: now, exp: now + 1200, aud: "appstoreconnect-v1" }));
+  const header = b64url3(JSON.stringify({ alg: "ES256", kid: keyId, typ: "JWT" }));
+  const payload = b64url3(JSON.stringify({ iss: issuerId, iat: now, exp: now + 1200, aud: "appstoreconnect-v1" }));
   const key3 = createPrivateKey4(p8);
-  const sig = b64url2(sign2("sha256", Buffer.from(`${header}.${payload}`), { key: key3, dsaEncoding: "ieee-p1363" }));
+  const sig = b64url3(sign2("sha256", Buffer.from(`${header}.${payload}`), { key: key3, dsaEncoding: "ieee-p1363" }));
   return `${header}.${payload}.${sig}`;
 }
 function bundleIdBody(identifier, name, platform = "IOS") {
@@ -167781,7 +167925,7 @@ var init_connector_token = __esm({
 });
 
 // ../../core/functions-secrets/src/vault.ts
-import { createCipheriv, createDecipheriv as createDecipheriv2, randomBytes as randomBytes6 } from "node:crypto";
+import { createCipheriv, createDecipheriv as createDecipheriv2, randomBytes as randomBytes7 } from "node:crypto";
 import { mkdir, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname44 } from "node:path";
 function createJsonSecretStore(filePath) {
@@ -167839,7 +167983,7 @@ function createSecretVault(options) {
       environment: input.environment,
       name: input.name,
       version: input.version,
-      iv: randomBytes6(12).toString("base64url"),
+      iv: randomBytes7(12).toString("base64url"),
       ciphertext: "",
       authTag: ""
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1457.0",
+  "version": "0.1459.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "10017f76e05c5fe66a5fd5aa29de830bd988def33be584b00978a718"
+  "falconPackageHash": "db96f8e1d9f3f0a55120ae97f89b4211fed249d7a3f98225dc9269b1"
 }